Send photos, files and text from your iPhone or Android to any computer. Scan a QR code. No app, no account. Free and end-to-end encrypted.
ProductivityJavaScript · HTMLGitHub @eyarOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
No updates detected yet. GitHub releases will appear here.
GitHub star growth between the latest completed 8-hour observations
DeepSeek Harness Remote can securely connect a phone or another computer to the computer where you run DeepSeek Harness, so you can continue your work anytime and anywhere, check progress anytime, and continue working.
AI translation
Open-source, local-first task manager that works offline, syncs every device, runs on a Raspberry Pi, and requires no subscription.
AI translation
Open-source, self-hosted webmail built on JMAP. Email, calendar, contacts, and files in one interface for Stalwart Mail Server.
Open Source Office suite for users used to MS Office - multi-platform, tuned for performance
Owners of public repositories under a personal GitHub account can sign in to verify ownership and manage the introduction themselves. No administrator approval is needed.
Sign in, generate a verification file, and commit it to this repository’s default branch within 30 minutes. Files on other branches or forks do not count. Then check the file below to manage the project without administrator approval. Keep the file to retain your access.
If needed, you will go to sign-in. After signing in, return here and press your chosen verification button again.
Run /nomorevibe verify in your project folder to verify ownership and manage the introduction yourself.
Verify in one minuteAsk about other verification options
Fast, private, zero-install file and text transfer between any devices, paired with a QR code. End-to-end encrypted.
Taken from the repository README
Loading the full README.
Read the full README ↗Fast, private, zero-install file and text transfer across any device.
An open-source, web-based AirDrop alternative that just works.
Handoff moves files, photos, videos, and text between your phone, tablet, and computer simply by scanning a QR code. No app installs, no account creation, and no passwords required.
Open handoffdrop.app on your computer, scan the QR code with your phone camera, and your devices are instantly paired.
Handoff is built with a zero-knowledge privacy model:
[ Computer ] [ Phone ]
│ │
├── 1. Generates 256-bit AES-GCM Key locally │
│ (never transmitted to any server) │
│ │
├── 2. Shows QR Code: │
│ handoffdrop.app/?room=XYZ#key=BASE64_KEY │
│ │
│ 3. Scans QR │
│ ◄─────────────────────────────────────────────-┤
│ │
│ 4. URL fragment (#key=...) parsed │
│ locally by phone browser │
│ │
[ Encrypted Ciphertext via Supabase Realtime / Cloudflare R2 ]
window.crypto.subtle).#key=...). Under RFC 3986, browsers never transmit the hash fragment to HTTP servers or logs.cleanup-storage, run by pg_cron every 10 minutes), which also aborts abandoned uploads.Not end-to-end encrypted: text and files sent with the iOS Shortcut (Shortcuts can't access the browser's key), and large files sent to a device that can't decrypt them on-device (e.g. older iPhones). These go over HTTPS only, are deleted on the same 15-minute schedule, and are shown without the 🔒 E2EE tag.
Encrypting a 1.5 GB video in one piece would need the whole file in memory, and iPhone Safari reloads the page long before that. Instead:
| Specification | Limit | Details |
|---|---|---|
| Price | Free ($0) | No subscriptions, accounts, or paywalls |
| Max File Size | 1.5 GB / file | Enforced by the app |
| End-to-End Encryption | Text & files, any size | 256-bit AES-GCM; chunked above 8 MB |
| File Retention | 15 minutes | Purged by the scheduled cleanup function |
| Text Retention | 60 seconds | Stored in volatile client memory only |
| Session Lifetime | 2 hours | Room tokens auto-expire |
| Concurrent Uploads | 2 files | Each large file uploads 3 chunks at a time |
We believe web software should be fast, transparent, and built on web standards:
r2-sign).shortcut-upload Edge Function.node --test, Node 22+) with zero external test framework dependencies.git clone https://github.com/eyar/handoff.git
cd handoff
npm install
Copy the example client configuration:
cp public/config.example.js public/config.js
Fill in your Supabase Project URL and publishable key in public/config.js (found in Supabase Dashboard → Project Settings → API).
npm run dev
Open http://localhost:3000 in your browser.
💡 Mobile Testing Tip: To test QR code pairing with a physical phone over the internet, start a quick Cloudflare tunnel:
npm run tunnel:quick
Handoff includes a fast, zero-dependency unit and integration test suite:
# Run syntax and module integrity check
npm run lint
# Run all unit and integration tests
npm test
# Run Chrome browser automated end-to-end flow
node scripts/test-e2e-chrome.js
Handoff can be deployed for free using a Cloudflare Worker with static assets and a free-tier Supabase project:
The site is plain static files in public/, served by the Worker configured in wrangler.toml.
public/config.js at your Supabase project.npx wrangler deploy, or connect the repository in Cloudflare Dashboard → Workers & Pages to deploy on every push.Set your R2 storage secrets in Supabase CLI or Dashboard:
supabase secrets set \
R2_ACCOUNT_ID="your_cloudflare_account_id" \
R2_ACCESS_KEY_ID="your_r2_access_key_id" \
R2_SECRET_ACCESS_KEY="your_r2_secret_access_key" \
R2_BUCKET_NAME="handoff-files"
Apply the database migrations and deploy the Edge Functions (supabase/config.toml turns off JWT verification for them, since the app has no accounts):
supabase db push
supabase functions deploy r2-sign
supabase functions deploy shortcut-upload
supabase functions deploy cleanup-storage
Files are only deleted when cleanup-storage runs. Schedule it every 10 minutes with pg_cron and pg_net (enable both extensions first):
select cron.schedule('handoff-cleanup', '*/10 * * * *', $$
select net.http_post(
url := 'https://<your-project-ref>.supabase.co/functions/v1/cleanup-storage',
headers := jsonb_build_object('Content-Type', 'application/json', 'apikey', '<your-anon-or-publishable-key>'),
body := '{}'::jsonb
);
$$);
Contributions, bug reports, and suggestions are warmly welcomed!
git checkout -b feat/my-new-feature).npm run lint && npm test).git commit -m 'feat: add support for XYZ').git push origin feat/my-new-feature).This project is open-source and licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).
Under the AGPLv3, you are free to inspect, audit, modify, and self-host this software, provided that any modified versions made available over a network are also shared under the same license with full source code.
Trademark & Brand Notice: The name "Handoff", "handoffdrop.app", domain names, and associated visual branding/logos are proprietary trademarks of the author and may not be used in derivative or competing hosted services without explicit written permission.